Lucene search
+L

3890 matches found

Citrix
Citrix
added 2019/12/30 12:0 a.m.9 views

Error: "Error getting status - Cannot find license file"

When the lmstat -a command is run from the command prompt on a computer with the Licensing software version 11.9 or later, the following error message is displayed: “Error getting status: Cannot find license file:” The preceding error message appears even after setting the location of the license...

7.2AI score
SaveExploits0
nodejs
nodejs
added 2019/12/23 2:7 p.m.20 views

Information Exposure

Overview Versions of type-graphql prior to 0.17.6 are vulnerable to Information Exposure. The package leaks the resolver source code in an error message. It is possible to force this error when no subscription topics are provided in the request. Recommendation Upgrade to version 0.17.6 or later...

6.9AI score
SaveExploits0Affected Software1
Tenable Nessus
Tenable Nessus
added 2019/12/18 12:0 a.m.24 views

Debian DLA-2038-2 : x2goclient regression update

A change introduced in libssh 0.6.3-4+deb8u4 which got released as DLA 2038-1 has broken x2goclient's way of scp'ing session setup files from client to server, resulting in an error message shown in a GUI error dialog box during session startup and session resuming. For Debian 8 'Jessie', this...

5.4AI score
SaveExploits0References2
Kitploit
Kitploit
added 2019/11/27 9:20 p.m.1212 views

XML External Entity (XXE) Injection Payload List

An XML External Entity XXE attack sometimes called an XXE injection attack is a type of attack that abuses a widely available but rarely used feature of XML parsers. Using XXE, an attacker is able to cause Denial of Service DoS as well as access local and remote content and services. XXE can be...

8.6AI score
SaveExploits0References1
Veracode
Veracode
added 2019/11/26 3:46 a.m.17 views

Cross-Site Scripting (XSS)

Zope 2 is vulnerable to cross-site scripting XSS. The vulnerability is due to an incomplete fix of CVE-2010-1104, which fails to sanitize the default standard error message errormessage parameter, allowing an attacker to inject an arbitrary script through it...

6.1CVSS2.8AI score0.0195EPSS
SaveExploits0References11Affected Software1
Prion
Prion
added 2019/11/25 6:15 p.m.19 views

Cross site scripting

Cross-site scripting XSS vulnerability in Zope 2.8.x before 2.8.12, 2.9.x before 2.9.12, 2.10.x before 2.10.11, 2.11.x before 2.11.6, and 2.12.x before 2.12.3, 3.1.1 through 3.4.1. allows remote attackers to inject arbitrary web script or HTML via vectors related to the way error messages perform...

4.3CVSS6AI score0.0195EPSS
SaveExploits0References7Affected Software1
Prion
Prion
added 2019/11/22 7:15 p.m.21 views

Design/Logic Flaw

The Mijosoft MijoSearch component 2.0.1 and earlier for Joomla! allows remote attackers to obtain sensitive information via a request to component/mijosearch/search, which reveals the installation path in an error message...

5CVSS6.6AI score0.01113EPSS
SaveExploits3References1Affected Software1
Cvelist
Cvelist
added 2019/11/22 6:20 p.m.25 views

CVE-2013-6879

The Mijosoft MijoSearch component 2.0.1 and earlier for Joomla! allows remote attackers to obtain sensitive information via a request to component/mijosearch/search, which reveals the installation path in an error message...

5AI score0.01113EPSS
SaveExploits3References1
OSV
OSV
added 2019/11/22 4:15 p.m.6 views

CVE-2019-4570

IBM Tivoli Netcool Impact 7.1.0 through 7.1.0.16 generates an error message that includes sensitive information about its environment, users, or associated data. IBM X-Force ID: 166720...

5.3CVSS5.8AI score0.00981EPSS
SaveExploits0References2
Prion
Prion
added 2019/11/22 4:15 p.m.20 views

Information disclosure

IBM Tivoli Netcool Impact 7.1.0 through 7.1.0.16 generates an error message that includes sensitive information about its environment, users, or associated data. IBM X-Force ID: 166720...

5CVSS4.9AI score0.00981EPSS
SaveExploits0References2Affected Software1
Citrix
Citrix
added 2019/11/22 12:0 a.m.12 views

Error: No Product Licenses Found on the License Server for the Selected Model

When configuring XenApp 6.5, the following error message is displayed: “No product licenses found on the license server for the selected model”...

7.2AI score
SaveExploits0
NVD
NVD
added 2019/11/20 5:15 p.m.21 views

CVE-2010-4659

Cross-site scripting XSS vulnerability in statusnet through 2010 in error message contents...

6.1CVSS6.1AI score0.00921EPSS
SaveExploits0References3
Prion
Prion
added 2019/11/20 5:15 p.m.20 views

Cross site scripting

Cross-site scripting XSS vulnerability in statusnet through 2010 in error message contents...

4.3CVSS6.2AI score0.00921EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
added 2019/11/20 4:47 p.m.22 views

CVE-2010-4659

Cross-site scripting XSS vulnerability in statusnet through 2010 in error message contents...

6.1AI score0.00921EPSS
SaveExploits0References3
CVE
CVE
added 2019/11/20 4:47 p.m.78 views

CVE-2010-4659

StatusNet (open-source PHP-based micro-blogging platform) contains a cross-site scripting (XSS) vulnerability in error message contents up through 2010. The root cause is insufficient validation of client-side data by the web application, enabling an attacker to execute client-side code via craft...

6.1CVSS6.1AI score0.00921EPSS
SaveExploits0References3Affected Software1
Veracode
Veracode
added 2019/11/18 3:47 a.m.14 views

Cross-Site Scripting (XSS)

KairosDB is vulnerable to cross-site scripting XSS. The vulnerability exists as the value of message is not sanitized when it is displayed when an error has occurred...

6.1CVSS1.5AI score0.00857EPSS
SaveExploits1References1Affected Software1
CNVD
CNVD
added 2019/11/18 12:0 a.m.7 views

KairosDB Cross-Site Scripting Vulnerability

KairosDB is a high-speed distributed scalable temporal database based on Cassandra. A cross-site scripting vulnerability exists in view.html in KairosDB 1.2.2 and earlier versions. The vulnerability stems from the showErrorMessage in js/graph.js, and can be exploited via view.html with the...

6.1CVSS6.1AI score0.00857EPSS
SaveExploits1References1
ATTACKERKB
ATTACKERKB
added 2019/11/17 9:15 p.m.4 views

CVE-2019-19040

KairosDB through 1.2.2 has XSS in view.html because of showErrorMessage in js/graph.js, as demonstrated by view.html?q= with a '"sampling":"value":"...

6.1CVSS5.4AI score0.00857EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
added 2019/11/17 12:0 a.m.10 views

PT-2019-15766 · Kairosdb · Kairosdb

Name of the Vulnerable Software and Affected Versions: KairosDB versions prior to 1.2.3 Description: The issue concerns an XSS vulnerability in the view.html file due to the showErrorMessage function in js/graph.js. This can be exploited by including a specific substring, such as...

6.1CVSS5.9AI score0.00857EPSS
SaveExploits1References6
Citrix
Citrix
added 2019/11/08 12:0 a.m.9 views

OS Layer Finalize fails with error "It looks like the packaging Machine has never been powered on".

While finalizing an OS layer edit in the App Layering appliance, you receive an error,"It looks like the packaging Machine has never been powered on." Can see the below error in ELM logs: 2019-11-01 09:53:36,890 ERROR 27 CpTaskResultMessag: Got Error type GlobalizedError. FailureReason: It looks...

7.1AI score
SaveExploits0
Rows per page
Query Builder